Applicant: Ding, et al. 
Filed: May 15,2006 

Amendment and Response to Non-final Office Action 
Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (Currently Amended) A digital signature scheme based on braid group conjugacy 
problem, parameters involved in this scheme comprising a signatory S, a signature verifying 
party V, a message M needing signature, an integer n for the a number of generators in the braid 
group, an integer m for the number of generators in the a left subgroup, an integer / for the a 
upper bound of4he a length of a braid, a braid group B n (I), a left subgroup L B m (1) of (I), a right 
subgroup RB„.i. m (l) ofB n (/), a one way hash function h from bit sequence {0,1 } *to braid 
groups B n (/); said signature scheme comprising the following steps of: 

Step 1 . the a signatory( S) selecting three braids xeLB m (l)j;' e B„(t),ae B n (t), and making 
them meet x '=d'xa, moreover, with known x and x ' , it being impossible to find a in calculation, 
and considering braid pair(x \x) as a public key of signatory (S), braid a as a private key of 
signatory (S); 

Step 2. signatory (S) using hash function h for message (M) needing signature to gety=h(M) 

Step 3. generating a braid b e RB n .i. m (l) at random, then signing the message (M) with the 
own private key a and the a generated random braid b to obtain Sign(M)=d'byb' 1 a; and 

Step 4. the signatory (S ) outputting message (M) and the a signature of message (M) 
Sign(M). 

2. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem according to claim 1, wherein generating the public key braid pair (x \x) and the private 
key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance d between system parameter braid groups public key pairs; 
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Step lb. representing x into the a left canonical form ;r=A u 7tiJt.2 ...%c, 
Step lc. selecting a braid b at random to belong to a set B n (5 I) 
Step Id. calculating x = ^ lx ^,a=b; 

Step le. generating a bit at random, if 1, calculating x'=decycling(x), a= am; if not 1, 
calculating x =cycling(x), a= ax u (Ki); 

Step If. judging whether x' belongs to SSS(x) and whether l(x) <d, if all the conditions are 
yes, outputting the braid pair(x, x) as the public key, a as the private key; if either of them is not, 
performing step le. 

3. (Original) The digital signature scheme based on braid group conjugacy problem 
according to claim 1, wherein the process for obtaining y=h(M) e B n (I) by using the hash 
function h in said step 2 comprises the following steps of: 

Step 2a, selecting an ordinary hash function H, with a length of output H(M) is / 
[log(2,n!)J, then dividing H(M) into / sections R,\\R 2 \\... \\R i in equal at one time; 

Step 2b, corresponding Ri to a permutation braid Ai, then calculating h(M) =A1*A2...AI , 
that is the h(M) required. 

4. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem according to claim 1, wherein a integer n for the number of generators in a braid group 
is in the range of 20- 30 28, an upper value of the braid length is 1=3, d=4, and an left subgroup 
n-m=4. 

5. -7. (Canceled) 

8. (Original) A digital signature scheme based on braid groups conjugacy problem and 
verifying method thereof, parameters involved in this method comprising a signatory S, a 
signature verifying party V, a message M needing signature, an integers for the number of 
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generators in the braid group, an integer m for the number of generators in the left subgroup, an 
integer / for the upper bound of the length of a braid, a braid group B n (I), a left subgroup L B m (I), 
a right subgroup RB„.j. m (l), a one way hash function h mapped from bit sequence {0,1 }*to braid 
groups B n (0; comprising the following steps of: 

Step 1 . the signatory( S) selecting three braids xeLB m (l),x' e B n {t),a& B n (I), and making 
them meet x '=a~ ! xa, moreover, with the known x and x ' , it is impossible to find a in calculation, 
and considering a braid pair(x \x) as a public key of the signatory (S), a braid a as a private key of 
signatory (S); 

Step 2. signatory (S) using a hash function h for message (M) needing signature to get 
y=h(M) € B n (l); 

Step 3. generating a braid b e RB„. } . m (l) at random, then signing the message (M) with the 
private key a and the braid b generated randomly to obtain Sign(M)=a'byb" 'or, 

Step 4. the signatory (S ) outputting the message (M) and its signature Sign(M) to the 
signature verifying party (V); 

Step 5. the signature verifying party( V) obtaining the public key of signatory {S ) after 
receiving the message( M) and the signature of message (M)Sign(M) transmitted from 
signatory (S); 

Step 6. calculating message M by employing a system parameter hash function h, to obtain 

y=h(M)\ 

Step 7. judging whether sign(M) and y are conjugate or not, if not, sign(M) is an illegal 
signature, the verification fails; if yes, perform step 8; and 

Step 8. calculating sign(M) x ' and xy by using the obtained public key of signatory ( S), and 
judging whether they are conjugate or not, if not, sign(M) is an illegal signature, and the 
verification fails; if yes, sign(M) is a legal signature of message (M). 
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9. (Original) The digital signature scheme based on braid group conjugacy problem and 
verifying method thereof according to claim 8, wherein generating the public key braid pair (x \x) 
and private key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance J between system parameter braid groups public key pair; 
Step lb. representing x into left canonial form x=A u itin2 ...nr, 
Step lc. selecting a braid b at random to belong to set B n (5 I) 

Step Id. calculating x'=* lxb ,a=b; 

Step le. generating a bit at random, if 1, calculating x =decycling(x), a= aizi\ if not 1, 
calculating* =cycling(x), a= a^(ni); and 

Step If. judging whether x' belongs to SSS(x) and whether l(x) <d, if all conditions are yes, 
outputting braid pair(x, x) as the public key, a as the private key; if either of them is not, 
performing step le. 

10. (Original) The digital signature scheme based on braid group conjugacy problem and 
verifying method thereof according to claim 8, wherein the process for obtaining y=h(M) e B n (I) 
by using hash function h in said step 2 comprises the following steps of: 

Step 2a. selecting an ordinary hash function H, with a length of its output H(M) is / 
[hg(2,n!)J, then dividing H(M) into / sections Ri\\R 2 \\ ... \\R i in equal at one time; and 

Step 2b. corresponding Ri to a permutation braid Ai, then calculating h(M) =A1*A2...AI , 
that is the h(M) required. 

11. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 8, wherein n for the number of the 
generation braids in the braid group is in the range of 20- 30 28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 
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12. (Original) The digital signature scheme based on braid group conjugacy problem and a 
verifying method thereof according to claim 8, wherein algorithm BCD A is employed in judging 
whether sign(M) and y are conjugate or not in step 7 and judging whether sign(M) x ' and xy are 
conjugate or not in step 8. 

13. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem according to claim 2, wherein a integer n for the number of generators in a braid group 
is in the range of 20- 50 28, an upper value of the braid length is 1=3, d=4, and an left subgroup 
n-m=4, 

14. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem according to claim 3, wherein a integer n for the number of generators in a braid group 
is in the range of 20- 50 28, an upper value of the braid length is 1=3, d=4, and an left subgroup 
n-m=4. 

15. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 9, wherein n for the number of the 
generation braids in the braid group is in the range of 20- 30 28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=A. 

16. (Currently Amended) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 10, wherein n for the number of the 
generation braids in the braid group is in the range of 20- 30 28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup «-n?=4. 



AO 1773301.1 



